Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131302e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3131302e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          3kGnZi2bpYPB0iT6KQ5iznZwpZh05nAxzDfy4T+HjR4=
Subject key identifier:   54:1F:6C:82:D0:11:FF:30:DA:B8:25:4E:8A:4C:B4:1F:52:B2:60:CD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       113ADF58FCC1523BEDF0F331C1E54CE676657196
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131302e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:08 +0000
ROA not before:           Thu 01 Jul 2021 07:55:08 +0000
ROA not after:            Fri 01 Jul 2022 08:00:08 +0000
asID:                     131111
IP address blocks:        103.154.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3a:df:58:fc:c1:52:3b:ed:f0:f3:31:c1:e5:4c:e6:76:65:71:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:08 2021 GMT
            Not After : Jul  1 08:00:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:db:1a:1a:2f:51:db:a0:5a:3b:62:f0:44:
                    4b:04:ae:5e:4d:c1:e9:1b:b5:1f:b6:41:0f:a5:e8:
                    fc:35:d0:f1:36:31:7f:87:29:20:a2:1d:df:14:c6:
                    3c:ca:12:0c:62:9f:0f:4b:ad:66:21:64:e9:c9:01:
                    ff:69:44:3d:77:46:48:2b:56:bf:85:60:26:a0:02:
                    15:72:a7:8e:43:ac:df:60:3b:1e:f2:28:4b:6a:35:
                    49:4c:43:09:e5:c0:d9:b3:ef:f0:71:06:bb:70:55:
                    7b:d6:47:65:b4:39:c9:d4:92:0c:ae:ba:ed:3f:a3:
                    ed:9d:5e:92:b1:46:d8:a8:8c:2f:b5:c0:cd:58:1d:
                    5c:b5:3c:e5:a8:d9:23:a6:74:b8:cd:99:1a:a6:f7:
                    2a:57:d3:23:78:75:10:69:1a:e2:27:bf:f6:87:83:
                    b8:c1:d3:27:6e:8a:eb:e8:df:8c:87:94:e4:ed:42:
                    50:9e:d3:4a:aa:00:a3:0d:db:da:40:a2:07:28:a1:
                    6c:d6:59:a8:62:3e:84:ed:64:cb:cf:a1:a6:ce:0f:
                    98:99:d8:db:7d:a0:c2:7d:81:2f:c2:a1:99:52:94:
                    10:0c:c2:ae:eb:13:f5:38:8c:27:5b:90:05:80:94:
                    29:11:55:47:2d:ee:6d:26:88:b9:76:ff:67:3a:a0:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1F:6C:82:D0:11:FF:30:DA:B8:25:4E:8A:4C:B4:1F:52:B2:60:CD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131302e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:19:18:b6:c4:a5:16:a0:65:34:4b:cd:c4:99:65:3e:95:63:
         4a:c8:de:d5:48:52:b2:7b:42:6b:b7:e3:0b:f5:d9:aa:dc:5f:
         b2:04:12:f9:ae:63:e6:b6:09:8d:97:47:bb:5d:4f:6b:da:cd:
         9b:e7:c9:ff:56:3f:08:e1:a4:3d:1c:ff:04:08:83:8a:b1:84:
         0e:98:09:53:eb:9e:ec:46:0c:fb:6e:ab:b5:33:5d:de:1b:03:
         d7:dd:23:d7:54:fe:11:fe:a4:61:52:66:ae:0a:53:3c:65:37:
         80:e5:f7:b1:3d:df:c1:ca:fd:fe:90:7f:08:2d:d5:7f:8d:2c:
         63:c5:6f:2f:57:7d:2a:9b:20:b7:ae:42:27:cb:5d:c5:4c:2c:
         d6:f8:bc:45:63:8c:48:d7:08:a5:ff:5b:e8:44:72:cd:2e:5c:
         7e:6a:ad:bd:89:97:cd:1a:17:dd:0e:11:63:92:a7:ae:fb:7f:
         02:e6:98:0b:3d:bd:b8:cd:c0:c5:6a:40:6a:9a:9e:17:10:d0:
         64:14:ac:59:c3:49:45:0a:69:a5:77:c6:3b:2a:c3:4e:1a:c2:
         3b:a9:12:e5:21:85:92:02:b3:bf:56:24:0c:7a:53:d2:3c:28:
         26:97:f7:19:c7:5c:11:af:09:62:36:f4:e7:d8:81:f6:24:34:
         78:be:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org